Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa
File:                     dee88f5f-56a7-311a-b481-95eb3fb841c0.roa (raw, json)
Hash identifier:          c7sxr0dpxxa8iymWZp8NSl0dltwcDDvQ0hoTwBQjkPg=
Subject key identifier:   B3:B5:1F:55:B9:AD:C3:0E:35:43:19:62:D1:B0:81:0E:3A:A4:39:3D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF4DB49E94A9739F0CAF68480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     852
IP address blocks:        2607:fe88:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:49:e9:4a:97:39:f0:ca:f6:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=9a2183b8-00a6-4612-b8d3-fcd8bb744d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:8d:87:a5:39:f8:2f:a3:d0:28:c8:17:3f:
                    72:3a:fd:f8:ab:40:01:07:7c:d3:e1:e3:40:f1:5a:
                    ed:f6:6a:36:3e:c9:90:ed:dd:c7:22:c4:dd:10:c2:
                    a3:6c:84:15:aa:ad:25:a3:fb:97:7d:31:98:9d:51:
                    aa:35:d9:f2:8f:61:0a:58:2d:8f:35:8d:04:7b:26:
                    c4:b0:cf:fe:53:49:2d:30:a0:6b:9a:a7:0b:5d:cb:
                    81:50:c8:a2:fe:3a:18:15:eb:a2:1e:a4:15:4f:2c:
                    a9:49:f6:22:61:6f:f6:8c:13:10:75:cd:9a:50:cd:
                    23:0c:d8:30:73:ff:19:8b:0b:77:5d:79:0c:f4:c3:
                    7a:89:e7:e5:a1:2d:8a:56:c3:6e:41:da:2a:cd:05:
                    bb:09:d5:3d:a5:4f:5f:f2:18:21:f2:7f:d0:4c:0e:
                    13:13:09:a1:40:5e:26:e0:5e:23:30:9d:ca:b9:5a:
                    15:de:f6:26:37:0c:eb:62:3e:33:51:7e:5a:57:a8:
                    a5:d4:ce:c7:4d:cb:f3:5e:b1:af:4a:32:c4:ac:18:
                    0c:c5:a5:1a:93:94:80:f6:25:95:67:e6:c1:31:8e:
                    01:da:74:11:58:f8:44:c6:c4:8a:72:e0:83:06:53:
                    28:98:0e:1f:30:2f:ba:f4:39:fb:67:2d:e7:df:36:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B5:1F:55:B9:AD:C3:0E:35:43:19:62:D1:B0:81:0E:3A:A4:39:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe88:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:8d:36:9c:78:a5:ee:ed:b8:4b:90:26:0d:c4:e2:40:27:13:
         ae:91:5d:f0:12:69:2a:45:02:81:1e:36:28:e5:fb:26:55:10:
         53:cf:99:07:9d:41:3c:b6:07:68:61:c1:35:6c:71:7e:51:34:
         a2:52:58:57:19:31:81:43:ad:1e:16:18:f1:29:3c:4d:d7:c2:
         a7:0d:6e:3e:ec:67:98:ed:de:7e:d2:b7:7b:26:e7:65:87:50:
         bd:8f:39:51:fa:43:a6:66:39:05:38:0e:8e:72:13:f6:ef:4a:
         8d:b1:35:6b:ac:29:43:5d:a1:4e:fc:94:da:ab:35:27:47:3c:
         ce:55:ee:05:df:0e:38:09:64:54:bc:30:d4:66:f4:4d:86:5f:
         12:85:92:ee:e5:a6:a4:9b:12:f8:f7:59:23:27:19:8f:c2:0d:
         ac:b7:c6:53:1f:6c:1a:ee:7e:19:52:06:b7:b3:6f:ac:61:e7:
         c2:50:9a:c8:7a:4f:6c:09:56:0d:c9:0c:f7:56:95:ae:82:62:
         ea:87:87:49:04:05:f7:36:f4:85:ca:ce:cb:74:02:5f:5f:c6:
         60:e0:81:23:0f:9f:cd:dd:03:32:28:75:d6:8b:77:8d:5e:91:
         cb:45:52:50:7f:8a:68:1f:c0:93:8f:ee:ef:eb:f7:62:c6:78:
         cb:b0:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:52:59 2026 by rpki-client